Overview

overview

8

Static

static

1

ICBC_付�...df.bat

windows10-2004-x64

8

ICBC_付�...df.bat

windows11-21h2-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    06052026_1638_ICBC_付款凭证.pdf.bat.tar
  • Size 22KB
  • Sample260506-t5em2aev91
  • SHA256 18d3b8eb8efa01bce997cb4c80f8085530847d8380f1e8e7ca97eb3bd2ad1b94
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
collectiondiscovery

Malware Config

Targets

    • Target
      ICBC_付款凭证.pdf.bat
    • Size 20KB
    • SHA256 7e932acbc4767d4874eb7b0f74531963d61067c2bcbb031bbeaf96cd5679d816
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    collectiondiscovery

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Drops startup file

    • Executes dropped EXE

    • Accesses Microsoft Outlook profiles

      collection
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks